Privacy Policy
Last updated: 26 August 2026
This notice explains how CyberMoves collects, uses and protects your personal data when you apply to join our associate pool, are represented to our clients, or use the CyberDeploy portal. We are committed to handling your data in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who we are
CyberMoves Ltd (“CyberMoves”, “we”, “us”) is the data controller for the personal data described here. We are a company registered in England and Wales (company number 16929512), with our registered office at 81a Crewe Road, Haslington, Crewe, England, CW1 5QX. You can contact us about your data at privacy@cybermoves.co.uk (or ryan@cybermoves.co.uk / nouri@cybermoves.co.uk).
What we collect
- Identity and contact details: your name, email address and phone number.
- Professional information: job title, seniority, skills, certifications, sectors, years of experience, languages, and right-to-work and security-clearance levels you tell us about.
- Availability and commercial information: your availability, capacity, work-style preferences and day rate.
- Your CV, when you send it to us.
- Portal usage: a secure sign-in cookie so you can log in (associates and clients).
How we use your data, and our lawful basis
We use your data to assess your application, match you to suitable assignments, and represent you to our vetted clients as an anonymised profile (your name and contact details are never shown to clients unless and until you and the client engage).
- Legitimate interests — assessing your suitability and matching you to work is a core part of our service to associates and clients.
- Consent — for sharing your anonymised profile with clients, which you give when you apply and can withdraw at any time.
- Legal obligation / contract — where we need your data to comply with the law or to place you on an assignment.
Who we share it with
We share an anonymised profile with vetted clients so they can consider you for work. Your name and contact details are only shared with a specific client once you have both agreed to proceed. We also use trusted service providers who process data on our behalf (see below). We do not sell your data.
Where your data is stored, and international transfers
Your data is held in Airtable (our records system) and processed by our email and hosting providers (Resend and Vercel). Some of these providers are based in the United States, so your data may be transferred outside the UK. Where that happens, the transfer is protected by appropriate safeguards such as the UK extension to the EU-US Data Privacy Framework and/or Standard Contractual Clauses. We keep access to our records restricted to authorised CyberMoves staff.
How long we keep it
We keep your data for as long as you are an active associate with us. If you apply but we don't proceed, or you become inactive, we keep your details for up to 24 months so we can consider you for future opportunities, after which we delete or anonymise them. You can ask us to delete your data sooner at any time.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing;
- data portability;
- withdraw consent at any time (without affecting processing already carried out).
To exercise any of these, email us at the address above. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to help first.
Cookies
The portal uses a single essential, httpOnly cookie to keep you signed in. We don't use advertising or tracking cookies.
Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last revised.